{"uid":"cap_pb3izfB2C_K7c_AFoVYeu","slug":"shopify-intel-agentdiet-dev-github-repository-security-license-auditor-9cb95435","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://shopify-intel.agentdiet.dev/v1/github-scanner)","url":"https://shopify-intel.agentdiet.dev/v1/github-scanner?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_J_RiB_gJ4aLiJc5BO1T7l","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"shopify-intel.agentdiet.dev","brandSlug":"shopify-intel-agentdiet-dev-mpp","brandBaseUrl":"https://shopify-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, maintenance velocity, supply-chain security, and dependency vulnerabilities before integrating or executing code.","exampleAgentPrompt":"Before I add langchain-ai/langgraph to our project, can you audit that GitHub repo and tell me about its license risks, how actively it's maintained, and whether there are any supply-chain security concerns?","exampleUseCases":[{"title":"Pre-integration dependency security check","prompt":"I'm about to use modelcontextprotocol/servers in our production codebase — can you scan that GitHub repo for license issues, security vulnerabilities, and tell me how well-maintained it is?"},{"title":"Open source license compliance audit","prompt":"Our legal team needs a license risk report on the huggingface/transformers GitHub repo before we ship — can you audit it and flag any problematic licenses or supply-chain risks?"},{"title":"Evaluating unfamiliar open source library","prompt":"I found a small GitHub library called owner/some-util that does what I need, but I've never used it — can you check its security posture, stars, maintenance activity, and license before I integrate it?"}],"resultDescription":"Returns a structured report covering the repository's license type and associated risk level, maintenance velocity (commit frequency, last activity), popularity signals (stars, forks), and supply-chain security findings including dependency vulnerability flags — giving an agent or developer a holistic go/no-go signal before code execution or integration.","failureModes":["Invalid or non-existent repository (owner/name format not found on GitHub) returns an error","Private repositories inaccessible without credentials may return 404 or permission error","GitHub API rate limiting may cause temporary failures","Malformed repo parameter (missing slash, wrong format) returns validation error","Repositories with no dependency manifests may return incomplete supply-chain data"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs to vet an open source GitHub repository before integrating it into a project — especially when license compliance, supply-chain security, and maintenance health all need to be evaluated in a single call. It is particularly valuable in automated CI/CD pipelines, agent-driven code generation workflows, or due-diligence scenarios where manually auditing GitHub is too slow.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:23:19.604Z","isFirstParty":false,"canonicalSlug":"shopify-intel-agentdiet-dev-github-repository-security-license-auditor-954c3432"}